
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
File: EB57B4A8B7DB581F45D8854952928F5926755B5D.mft (raw, json)
Hash identifier: CetLplEBGDcwRQV71JhDjS4XLoWC8bdD5jYAU5kQlzU=
Subject key identifier: 29:0E:34:50:BD:70:B7:1F:18:D0:C5:2F:4F:F0:D2:D0:36:C8:BA:E2
Authority key identifier: EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D
Certificate issuer: /CN=EB57B4A8B7DB581F45D8854952928F5926755B5D
Certificate serial: 67D43EA3125DAAC0BE51129CF1714F071299ACF6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 23:22:21 +0000
Manifest this update: Tue 16 Jun 2026 23:17:21 +0000
Manifest next update: Thu 18 Jun 2026 02:46:21 +0000
Files and hashes: 1: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: jRiKTU/j+tIlx8UR6dB8nvnEvGokztihjDnumCFG4MY=)
2: EB57B4A8B7DB581F45D8854952928F5926755B5D.crl (hash: EKZS53mTXEGIE2jRMnBovid8zw3ScQGhE8LLyOkytOA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl
rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d4:3e:a3:12:5d:aa:c0:be:51:12:9c:f1:71:4f:07:12:99:ac:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB57B4A8B7DB581F45D8854952928F5926755B5D
Validity
Not Before: Jun 16 23:17:21 2026 GMT
Not After : Jun 18 02:46:21 2026 GMT
Subject: CN=290E3450BD70B71F18D0C52F4FF0D2D036C8BAE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:50:85:2e:53:71:82:c7:77:d6:11:bb:ce:
e9:3b:b6:3f:98:5f:8f:1f:84:e5:76:f6:ed:8b:0e:
af:95:4d:db:34:96:76:a0:19:b7:a3:cd:e2:5e:bc:
d3:dd:24:55:11:5f:35:e9:e0:a8:e7:b9:4d:4b:d6:
d6:ad:7c:d1:6c:a2:e1:34:6c:6c:21:14:96:b8:0b:
8b:fe:5d:47:ab:e6:44:9f:17:97:62:33:8b:8f:99:
e1:ae:b4:65:78:ae:98:61:c2:bf:7e:6d:33:0e:c1:
94:c5:b6:bf:82:ac:44:a0:b1:e2:0d:0f:a8:b4:65:
d1:dc:cf:c7:14:32:5b:31:f7:9b:c8:00:64:02:0e:
e4:69:b6:41:71:e7:2b:ac:15:81:43:da:90:1d:dd:
5d:40:f8:f7:bd:b3:ac:d8:41:f2:44:4a:42:5e:34:
72:60:15:26:ff:85:d6:f1:78:14:42:0d:9f:7b:cd:
c6:10:d0:cc:d5:62:97:7f:de:3a:b8:cb:75:c2:71:
4c:12:c2:a0:c8:73:3e:a0:08:b8:d5:e2:d3:d3:36:
c0:b5:18:9c:00:7e:9d:89:97:e6:c1:cb:2c:09:33:
90:87:78:c7:49:8c:5b:94:6b:dc:ff:0f:46:f7:31:
1c:97:af:bf:8f:d3:11:29:44:30:16:b8:c7:6d:40:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0E:34:50:BD:70:B7:1F:18:D0:C5:2F:4F:F0:D2:D0:36:C8:BA:E2
X509v3 Authority Key Identifier:
keyid:EB:57:B4:A8:B7:DB:58:1F:45:D8:85:49:52:92:8F:59:26:75:5B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/EB57B4A8B7DB581F45D8854952928F5926755B5D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3b:b6:c8:31:dd:fb:23:1b:d9:5c:d0:2a:bf:e3:41:2d:f6:
c6:cc:d3:7d:93:16:30:14:f6:14:0e:e1:27:2e:39:e5:15:06:
cc:db:f1:cc:02:5c:5f:ac:b4:89:7c:8d:54:55:f7:e2:6c:af:
da:1b:71:52:a9:89:0e:73:d7:6f:ad:80:9f:7c:90:59:36:f9:
93:2c:39:43:21:c8:a0:df:4d:54:f9:cd:46:80:50:83:e3:b8:
30:d4:22:15:1b:80:74:94:f6:2c:df:2c:cb:c5:52:72:2a:64:
0c:06:6e:ce:8e:21:62:ab:4a:dc:2c:ce:09:20:90:fc:61:64:
24:e7:52:ed:4b:6d:cb:0c:55:50:9e:f9:c4:f8:c7:05:ed:2a:
9b:b4:e0:77:57:66:11:b1:4e:93:53:ac:0d:a0:32:3c:b2:50:
6d:e8:12:e4:ef:83:9d:f9:a4:30:30:4b:5f:3f:b0:7e:bf:2e:
5b:08:e8:27:55:bd:cc:b2:ca:cb:32:a6:cd:4f:d4:f5:c0:7c:
71:97:9f:e7:56:5e:5c:3f:a5:28:21:c2:e5:81:50:7b:c4:5a:
44:f2:52:a9:52:4e:f9:64:93:22:5d:45:31:80:43:4c:19:54:
59:b0:85:34:74:d1:0f:6f:a9:f1:83:4d:78:2b:aa:cf:0f:b6:
f6:fd:38:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:04:36 2026 by rpki-client